Agent skills for Windsurf (legacy)

Detect hard-coded secrets, tokens, private keys, API credentials in source code, config files, commit history, and CI logs.

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

When to activate: secrets, API keys, environment variables, Vault, AWS Secrets Manager, .env, secret rotation, credentials

Design, provision, use, rotate, revoke, detect, and recover from application secrets safely.

Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets…

Section 186 of the German Criminal Code (StGB) is examined in cases of defamatory factual assertions that are not demonstrably true.

Deterministically merge the final fingerprinted section snapshot into `output/DRAFT.md`, preserving outline order and inserting…

Use when brainstorming game features, prioritizing systems, or creative planning for the Sector project.

Guide for building and debugging Sector's frame composition — the DrawOrder pipeline, render layers, screen stack, and HUD element…

Use when writing integration tests for the Sector game project.

Interactive C# REPL against the running Sector game via sector_eval.

Create comprehensive industry and sector landscape reports covering market dynamics, competitive positioning, key players, and thematic…

Diagnose runtime bugs, visual glitches, and unexpected behavior in the Sector MonoGame game by inspecting the live game via sector-mcp…

Iterative shader development for Sector's MonoGame rendering pipeline with visual feedback loops via sector-mcp tools.

Verify visual changes to the Sector game using screenshots and ASCII layout inspection via sector-mcp tools.

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom…

Secures AWS API Gateway endpoints with AWS WAF by configuring managed

Hardens AWS IAM configurations to enforce least-privilege access, covering

Hardens AWS Lambda execution roles by writing least-privilege IAM policies,

Secures container registry images (ECR, ACR, GCR, Docker Hub) by scanning

Hardens GitHub Actions workflows against supply chain attacks, credential